CVE-2015-3244

EPSS 0.27%
Veröffentlicht 16.07.2015 11:00:23
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified resource ID.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Jboss Enterprise Portal Platform Version6.2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.27%	0.498

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.9	6.8	4.9	AV:N/AC:M/Au:S/C:P/I:P/A:N

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

http://rhn.redhat.com/errata/RHSA-2015-1226.html

Vendor Advisory

http://www.securityfocus.com/bid/75941

https://bugzilla.redhat.com/show_bug.cgi?id=1232908

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-3244

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-3244

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-3244

EUVD